Mod regex for tcpspy(no ngrep)